agentic-workflow-manager 9.18.0 → 9.20.0

package/dist/src/core/changes/worktree.js

@@ -0,0 +1,53 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REASON_GIT_FAILED = exports.REASON_NOT_REPO = exports.RUNTIME_STATE_EXCLUDES = void 0;
+exports.gitState = gitState;
+const path_1 = __importDefault(require("path"));
+const git_env_1 = require("./git-env");
+const text_safety_1 = require("./text-safety");
+/** Local runtime state that never counts as a working-tree change. Everything else under `.awm/` (e.g. `.awm/sensors.json`) does. */
+exports.RUNTIME_STATE_EXCLUDES = ['.awm/sensors/runs', '.awm/journal', '.awm/ledger', '.awm/evidence', '.awm/track.json'];
+exports.REASON_NOT_REPO = 'not inside a git repository with a commit';
+exports.REASON_GIT_FAILED = 'git command failed or timed out';
+const MAX_EXTRA_EXCLUDES = 64;
+const MAX_GIT_OUTPUT = 64 * 1024 * 1024;
+/** A git that ran and exited non-zero (no repo, no commit) is `not-repo`; one that could not run, timed out or overflowed is `failed`. */
+function gitFailure(error) {
+    return typeof error.status === 'number' ? { kind: 'not-repo' } : { kind: 'failed' };
+}
+/**
+ * Repository root, HEAD and whether the tree differs from it, excluding RUNTIME_STATE_EXCLUDES.
+ * `untracked` selects the pre-run measure (untracked files count, forced past any `status.showUntrackedFiles` config)
+ * or the post-run recheck (tracked changes only). `extraExcludes` (default none) are repo-relative paths ignored in addition
+ * to RUNTIME_STATE_EXCLUDES; any that is not a safe relative path makes the result `failed`. The root is returned with native
+ * separators: git prints forward slashes on Windows. Never throws.
+ */
+function gitState(cwd, untracked, extraExcludes = []) {
+    if (typeof cwd !== 'string' || cwd.length === 0)
+        return { kind: 'failed' };
+    if (!Array.isArray(extraExcludes) || extraExcludes.length > MAX_EXTRA_EXCLUDES || !extraExcludes.every(text_safety_1.isSafeRelativePath))
+        return { kind: 'failed' };
+    let root;
+    let commit;
+    try {
+        root = path_1.default.resolve((0, git_env_1.execGit)(cwd, ['rev-parse', '--show-toplevel'], { stderr: 'ignore' }).trim());
+        commit = (0, git_env_1.execGit)(root, ['rev-parse', 'HEAD'], { stderr: 'ignore' }).trim();
+    }
+    catch (error) {
+        return gitFailure(error);
+    }
+    try {
+        // Submodules are never hidden by config (`.gitmodules` ignore=all, diff.ignoreSubmodules). The pre-run measure counts everything
+        // (`none`); the post-run recheck is about tracked files only, so it also ignores untracked content inside a submodule
+        // (sensor build/coverage output) while still seeing a moved checkout or modified tracked content (`untracked`).
+        const args = ['status', '--porcelain', untracked ? '--untracked-files=normal' : '--untracked-files=no', untracked ? '--ignore-submodules=none' : '--ignore-submodules=untracked', '--', '.', ...exports.RUNTIME_STATE_EXCLUDES.map((p) => `:(exclude)${p}`), ...extraExcludes.map((p) => `:(exclude,literal)${p}`)];
+        const status = (0, git_env_1.execGit)(root, args, { stderr: 'ignore', maxBuffer: MAX_GIT_OUTPUT });
+        return { kind: 'ok', root, commit, dirty: status.trim().length > 0 };
+    }
+    catch {
+        return { kind: 'failed' };
+    }
+}

package/dist/src/core/currentness/check.js

@@ -162,12 +162,15 @@ async function registryComponent(registry, git, prefs, checkedAt) {
     if (!authorizedSource)
         return fail('Configured registry remote is not an authoritative HTTPS or SSH source.', 'Configure an authoritative registry remote and rerun strict preflight.');
     const [originResult, headResult, tagResult, remoteResult] = await Promise.allSettled([
-        deadline(git(registry.contentRoot, ['remote', 'get-url', 'origin'], { timeoutMs: TIMEOUT_MS, maxOutputBytes: MAX_OUTPUT_BYTES })),
+        // The literal stored value of THIS checkout: `git remote get-url` applies url.*.insteadOf, and
+        // cloud environments (AWM's own D-7 recipe) rewrite to a token-bearing URL; without
+        // `--local`, a global/system `remote.origin.url` could stand in for a missing origin.
+        deadline(git(registry.contentRoot, ['config', '--local', '--get', 'remote.origin.url'], { timeoutMs: TIMEOUT_MS, maxOutputBytes: MAX_OUTPUT_BYTES })),
         deadline(git(registry.contentRoot, ['rev-parse', 'HEAD'], { timeoutMs: TIMEOUT_MS, maxOutputBytes: MAX_OUTPUT_BYTES })),
         deadline(git(registry.contentRoot, ['describe', '--tags', '--exact-match', 'HEAD'], { timeoutMs: TIMEOUT_MS, maxOutputBytes: MAX_OUTPUT_BYTES })),
         deadline(git(registry.contentRoot, ['ls-remote', '--tags', registry.remote], { timeoutMs: TIMEOUT_MS, maxOutputBytes: MAX_OUTPUT_BYTES })),
     ]);
-    if (originResult.status === 'rejected')
+    if (originResult.status === 'rejected' || originResult.value.trim() === '')
         return fail('Could not read local registry origin.', 'Inspect the local registry checkout and its origin remote.');
     if (headResult.status === 'rejected')
         return fail('Could not read local registry HEAD.', 'Inspect or repair the local registry checkout.');

package/dist/src/index.js

@@ -45,6 +45,8 @@ const job_1 = require("./commands/job");
 const watch_1 = require("./commands/watch");
 const track_1 = require("./commands/track");
 const evidence_1 = require("./commands/evidence");
+const change_1 = require("./commands/change");
+const changes_1 = require("./commands/changes");
 const process_1 = require("./commands/process");
 const context_1 = require("./commands/context");
 const model_policy_1 = require("./commands/model-policy");
@@ -752,6 +754,8 @@ miroCmd.command('sync <storyMapPath>')
 (0, watch_1.registerWatchCommand)(exports.program);
 (0, track_1.registerTrackCommand)(exports.program);
 (0, evidence_1.registerEvidenceCommand)(exports.program);
+(0, change_1.registerChangeCommand)(exports.program);
+(0, changes_1.registerChangesCommand)(exports.program);
 (0, process_1.registerProcessCommand)(exports.program);
 (0, context_1.registerContextCommand)(exports.program);
 // Commander only waits for async action handlers through parseAsync().  The CLI has

package/dist/src/release/orchestrator.js

@@ -69,7 +69,9 @@ function release(opts, io) {
     const section = (0, core_1.renderChangelog)(version, io.today(), commits);
     io.writeChangelog(section + '\n' + io.readChangelog());
     io.run('git', ['add', 'cli/package.json', 'cli/package-lock.json', 'CHANGELOG.md']);
-    io.run('git', ['commit', '-m', `chore(release): v${version} [skip ci]`]);
+    // R6.1 (#217): the bump commit carries the Change Record opt-out trailer so
+    // `awm changes list` reports it as `exempt`, never as `missing`.
+    io.run('git', ['commit', '-m', `chore(release): v${version} [skip ci]`, '-m', 'Change-Record: none']);
     io.run('git', ['tag', '-a', `v${version}`, '-m', `v${version}`]);
     // OIDC mode: GitHub inyecta ACTIONS_ID_TOKEN_REQUEST_URL con id-token:write
     //            o NODE_AUTH_TOKEN sin NPM_TOKEN (setup-node legacy con OIDC)